What is SSO?
With Single Sign-On (SSO), your users can log in to the online academy using an external account.
In this article, we explain what needs to be configured to activate this integration with Okta.
To use SSO, users must already be added to the online academy. SSO does not create user accounts.
Read more here about adding users to your online academy.
How do I configure SSO?
We will provide instructions on how to set up SSO. Please consult Okta’s support for the precise settings.
Step-by-step guide for creating credentials in Okta
To set up SSO via Okta, you can follow the steps below. This Okta support article can also assist you in the process.
Obtain our Metadata URL using the following link: http://saml2.rakoo.com/saml/metadata
In our metadata, you will find our entityID. This needs to be entered at the Audience URL in the Okta SAML integration.
Configure the attributes to match Rakoo:
firstname = user.firstname
lastname = user.lastname
email = user.email
Next, you will need the credentials from Okta to configure the integration into your online academy. You can find this metadata at the 'sign on' tab at the SAML integration in Okta.
Identity Provider Single sign-on URL
It may look like this (example): https://klantnaam.okta-emea.com/app/iyk5twfdkaYFwYiP29b7/sso/saml/metadataAudience URL
It may look like this (example): http://www.okta.com/iyk5twfdkaYFwYiP29b7
Optional: Certificate that we can add to the connection
X.509 Certificate
Step-by-step guide for creating the integration in the online academy
SSO only
Go to “Integrations” via the menu on the left.
Under “Single Sign-On,” choose “Okta (SAML).”
Click “Add.”
Enter the information obtained from Okta.
If desired, enable the toggles under “Integration status”:
Use “Activated” to specify whether the integration is active.
With “Login with button,” you can choose whether a button should be displayed on the login screen. If this option is disabled, users can only log in via an external SSO method (e.g. intranet).
By default, the 'Log in with Okta' button will be shown on the login page.
Through 'Icon on login', both the text and the associated icon can be customized.Save the changes to activate the integration.
SSO with automatic account creation
The SSO integration can also be configured to automatically create users in Rakoo when they log in via SSO for the first time and don’t have an account yet.
To set this up, first complete all the steps above. Then, in the integration settings in Rakoo, check the box ‘Create user if they do not yet exist in Rakoo’.
Fill in the external JSON mapping. This specifies which Oka fields (right) are used to populate the fields in Rakoo. Refer to Okta's knowledge base to set up the correct claims. Need help? Please contact support.
If a company or department is sent that doesn’t yet exist in Rakoo, it will be created automatically.
{
"corporateId": "enter your own value",
"department": "enter your own value",
"company": "enter your own value",
"companyPath": null,
"firstName": "enter your own value",
"lastName": "enter your own value"
}Please note!
Users created via SSO are not updated via SSO. If you want them to be updated, you’ll need to arrange this another way: manually, or through an integration with Microsoft Entra or your HR software.
Are you having trouble with the setup? Please contact support.